xerphn

4 ms·

1. 1.▲
   by xerphn 12y ago

   For those who want to follow the course without access to the warzones (until the course is over), or just practice the material, you could play with some of the other warzones out there. There is https://exploit-exercises.com&#x
2. 2.▲
   by xerphn 12y ago

   A lot of these security auditors(but not all!) are just running automated tools and generating automated reports. Woah... A professional security auditor actually knows what to look for and would be flexible enough to understand (and mani
3. 3.▲
   by xerphn 12y ago

   This says a good deal about your company's priorities. You say you do due diligence to make sure the software you include is secure... yet you miss on such blatant vulnerabilities. "Not doing enough" only scrapes the surface.
4. 4.▲
   by xerphn 12y ago

   No. You are saying that anyone who creates software with a security bug in it should be condemned. Komodia built their software with a very serious security hole, intentionally , to sell a product with HTTPS sniffing abilities. Just becaus
5. 5.▲
   Lizard Stresser Source Code(github.com)

   2 points by xerphn 12y ago|0 comments